Kuburitswa kweRiot Matrix mutengi 1.6 nekupera-kusvika-kumagumo encryption yakagoneswa

Vagadziri veMatrix decentralized communications system yakaunzwa zvitsva zvinoburitswa zveakakosha mutengi application Riot Web 1.6, Riot Desktop 1.6, Riot iOS 0.11.1 uye RiotX Android 0.19. Mhirizhonga inonyorwa uchishandisa webhu tekinoroji uye iyo React framework (kusunga kunoshandiswa React Matrix SDK) Desktop shanduro kuenda ku zvichibva paElectron platform. Code inoparadzirwa ne ine rezinesi pasi peApache 2.0.

Key kuvandudzika mushanduro itsva, end-to-end encryption (E2EE, end-to-end encryption) yakagoneswa nekusarudzika kune ese matsva epachivande chats, ayo anopindwa nekutumira kukoka. Kupera-kusvika-kumagumo encryption kunoitwa zvichibva pane yayo protocol, iyo inoshandisa algorithm yekutanga kiyi yekutsinhana uye kuchengetedza makiyi echikamu. kaviri ratchet (chikamu cheSignal protocol).

Kutaurirana makiyi muhurukuro nevakawanda vatori vechikamu, shandisa kuwedzera Megolm, yakagadziridzwa encryption meseji ine nhamba huru yevanogamuchira uye kubvumira imwe meseji kuti idhindwe kakawanda. Iyo meseji ciphertext inogona kuchengetwa pane isina kuvimbwa server, asi haigone kucheneswa pasina makiyi emusangano akachengetwa kudivi remutengi (mutengi wega wega ane kiyi yake yesesheni). Pakuvharidzira, meseji yega yega inogadzirwa nekiyi yayo zvichienderana nekiyi yemutengi, iyo inosimbisa meseji inoenderana nemunyori. Kubata kiyi kunobvumidza iwe kukanganisa chete mameseji akatotumirwa, asi kwete mameseji anozotumirwa mune ramangwana. Kuitwa kwenzira dzekunyorera kwakaongororwa neNCC Boka.

Shanduko yechipiri yakakosha ndeye activation yerutsigiro rwekuyambuka-kusaina, iyo inobvumira mushandisi kuona chikamu chitsva kubva kuchikamu chakatosimbiswa. Kare, kana uchibatana nechat yemushandisi kubva pachigadzirwa chitsva, yambiro yairatidzwa kune vamwe vatori vechikamu kuti vadzivise kuteerera kana munhu anorwisa akawana account yemunhu akabatwa. Cross-verification inobvumira mushandisi kuti aone mamwe maturusi pakupinda uye kusimbisa kuvimba mune nyowani yekuisa kana kuona kuti mumwe munhu akaedza kubatanidza pasina ruzivo rwavo.

Kurerutsa kuseta kwemazino matsva, kugona kushandisa QR macode kunopihwa. Zvikumbiro zvekuongorora uye zvawanikwa zvave kuchengetwa munhoroondo semeseji dzakatumirwa zvakananga. Panzvimbo peiyo pop-up modal dialog, verification yave kuitwa mudivi repadivi. Pakati pemikana inofambidzana, iyo layer inocherechedzwawo Pantalaimon, iyo inokutendera kuti ubatanidze kune encrypted chats kubva kune vatengi vasingatsigire E2EE, uye inoshandawo kudivi revatengi. mashini tsvaga uye index mafaera mumakamuri akavharidzirwa ekutaura.

Kuburitswa kweRiot Matrix mutengi 1.6 nekupera-kusvika-kumagumo encryption yakagoneswa

Ngatiyeukei kuti puratifomu yekuronga yakamisikidzwa kutaurirana Matrix iri kusimukira sepurojekiti inoshandisa yakavhurika zviyero uye inobhadhara zvakanyanya kuve nechokwadi chekuchengetedza uye kuvanzika kwevashandisi. Chekufambisa chinoshandiswa HTTPS+JSON paine mukana wekushandisa WebSockets kana protocol yakavakirwa pa CoAP+ruzha. Iyo sisitimu inoumbwa senharaunda yemaseva anogona kudyidzana uye akabatana kuita yakajairika decentralized network. Mameseji anodzokororwa pamasevha ese ane vatori vechikamu mameseji akabatana. Mameseji anogovaniswa pamasevha nenzira imwechete iyo inoita inogoverwa pakati peGit repositori. Muchiitiko chekudzima kwechinguva, mameseji haarasikirwe, asi anotumirwa kune vashandisi mushure mekunge sevha yatangazve kushanda. Yakasiyana-siyana yevashandisi ID sarudzo dzinotsigirwa, kusanganisira email, nhamba yefoni, Facebook account, nezvimwe.

Kuburitswa kweRiot Matrix mutengi 1.6 nekupera-kusvika-kumagumo encryption yakagoneswa

Iko hakuna imwe poindi yekutadza kana meseji kutonga pane network. Masevha ese akafukidzwa nehurukuro akaenzana kune mumwe nemumwe.
Chero mushandisi anogona kumhanyisa sevha yake uye oibatanidza kune yakajairika network. Zvinokwanisika kugadzira magedhi yekudyidzana kweMatrix nemasisitimu akavakirwa pane mamwe maprotocol, semuenzaniso, yakagadzirirwa masevhisi enzira mbiri dzekutumira mameseji kuIRC, Facebook, Telegraph, Skype, Hangouts, Email, WhatsApp uye Slack.

Pamusoro pekutumira mameseji nekukurumidza uye chats, iyo system inogona kushandiswa kuendesa mafaera, kutumira zviziviso,
kuronga teleconferences, kuita izwi uye vhidhiyo kufona.
Matrix inokubvumira kushandisa kutsvaga uye kuona kusingagumi kwenhoroondo yetsamba. Iyo zvakare inotsigira akadai maficha epamberi sekuzivisa kutaipa, kuongororwa kwevashandisi kuvepo kwepamhepo, kuverenga simbiso, push notices, server-side kutsvaga, kuwiriranisa kwenhoroondo uye chimiro chevatengi.

Source: opennet.ru

Voeg